$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa File: e820c2de-4153-3772-8779-b9ed95316688.roa (raw, json) Hash identifier: LmEvdsWNlYldJ/LdzHnNQ+Cpg1F1cBd5/1ill0bN9mA= Subject key identifier: 49:A1:DD:75:14:3D:28:89:BA:3A:E7:56:37:E8:EE:71:A4:BF:5D:75 Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a Certificate serial: 010D0C9F4328584BBFA5ABFA272D9FECDBB54AC0 Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16839 IP address blocks: 199.91.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:ab:fa:27:2d:9f:ec:db:b5:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=d20cc28d-31ba-435b-9287-32f9b14a462f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:b1:22:dc:b0:8e:da:15:95:68:ff:24:a5: 0b:80:56:07:43:45:6b:1f:81:1d:7c:01:75:57:11: 87:2c:b2:eb:da:05:e5:68:b8:00:f5:f0:58:cc:da: 29:70:db:6c:15:02:f6:61:59:55:28:a2:ce:f8:55: 31:07:52:74:02:4c:e6:5f:37:1d:0d:69:2a:80:c9: de:cd:6c:1f:57:bf:41:7e:6d:82:e1:cb:73:23:9e: 1f:86:fa:69:3b:cd:e8:95:9f:b6:2b:a9:ef:7d:17: ff:b3:a2:90:01:c2:4d:c8:27:77:04:4c:8c:6a:53: df:51:22:65:41:96:53:b4:2e:00:a3:12:ed:1f:2f: 78:b6:90:3f:20:84:e2:2f:21:43:05:3e:56:45:c4: 0a:e0:14:be:6b:dc:89:d0:69:5d:bc:d3:ae:c9:15: 8e:57:77:c4:66:4c:14:66:cb:6a:ed:4c:cb:25:94: ff:52:b7:d5:2d:d6:d4:0f:a3:01:97:b3:8f:82:87: f1:13:8a:90:07:a1:6b:db:ed:0c:e0:28:ff:b7:d9: 78:1d:fa:12:b5:19:fc:ed:96:b9:a3:66:f8:2b:78: 77:5a:89:5e:f5:1e:fa:dd:25:7c:2d:dc:3b:4f:af: e4:74:2e:de:78:50:09:d1:6c:af:3a:35:71:67:db: bd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A1:DD:75:14:3D:28:89:BA:3A:E7:56:37:E8:EE:71:A4:BF:5D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/e820c2de-4153-3772-8779-b9ed95316688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl X509v3 Authority Key Identifier: keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer sbgp-ipAddrBlock: critical IPv4: 199.91.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:fd:c2:87:f0:9e:4e:37:48:08:71:c6:f0:0a:79:99:0d:59: 90:a4:86:e6:6f:1b:2f:44:b7:b0:d9:a7:8d:ef:e5:6e:10:39: b8:18:bf:c1:6a:75:2b:14:94:4a:42:3a:fb:c0:9b:05:2e:37: 6f:87:ad:73:2f:ab:f1:4b:cc:49:36:06:94:5d:62:be:34:3a: 9e:f8:f7:b0:ad:27:98:f8:e5:d0:c4:02:97:7c:ed:d7:a7:a1: 67:96:5a:85:95:a6:7b:cd:da:89:3b:45:8b:24:3f:66:f3:1c: 14:2c:0b:96:20:3f:a9:4a:bb:d3:7e:75:05:cc:3a:4f:4b:1b: cf:61:a3:23:98:bd:e0:a9:84:97:7c:c6:60:e3:0e:e5:aa:2d: 16:1f:09:8e:13:97:a7:6c:d8:04:e1:81:b7:8c:26:61:d9:b2: 1a:56:38:bb:ce:f1:77:e4:5b:91:63:0d:96:8d:17:91:8e:b0: 18:94:a5:d3:48:86:31:00:fb:3b:9f:5c:c4:44:c7:9d:e0:17: 7f:c8:f9:46:57:b3:4f:a9:41:3d:a7:92:bf:60:1b:68:87:33: 60:31:b5:f8:f4:01:11:a8:5d:06:fa:f0:5c:1b:fa:21:25:aa: b1:84:5f:5b:7d:d5:c5:c0:b3:93:de:bc:b6:f0:62:f5:f1:ac: 4d:df:57:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pav6Jy2f7Nu1SsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm MjlhMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZDIwY2MyOGQtMzFiYS00MzViLTkyODctMzJmOWIxNGE0NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQqxItywjtoVlWj/JKULgFYHQ0VrH4EdfAF1 VxGHLLLr2gXlaLgA9fBYzNopcNtsFQL2YVlVKKLO+FUxB1J0AkzmXzcdDWkqgMne zWwfV79Bfm2C4ctzI54fhvppO83olZ+2K6nvfRf/s6KQAcJNyCd3BEyMalPfUSJl QZZTtC4AoxLtHy94tpA/IITiLyFDBT5WRcQK4BS+a9yJ0GldvNOuyRWOV3fEZkwU Zstq7UzLJZT/UrfVLdbUD6MBl7OPgofxE4qQB6Fr2+0M4Cj/t9l4HfoStRn87Za5 o2b4K3h3Wole9R763SV8Ldw7T6/kdC7eeFAJ0WyvOjVxZ9u9/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmh3XUUPSiJujrnVjfo7nGkv111MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvZTgyMGMyZGUtNDE1My0z NzcyLTg3NzktYjllZDk1MzE2Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh NzgzZGYyOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1uLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH9wofwnk43SAhxxvAKeZkNWZCkhuZvGy9Et7DZp43v5W4QObgYv8Fq dSsUlEpCOvvAmwUuN2+HrXMvq/FLzEk2BpRdYr40Op7497CtJ5j45dDEApd87den oWeWWoWVpnvN2ok7RYskP2bzHBQsC5YgP6lKu9N+dQXMOk9LG89hoyOYveCphJd8 xmDjDuWqLRYfCY4Tl6ds2AThgbeMJmHZshpWOLvO8XfkW5FjDZaNF5GOsBiUpdNI hjEA+zufXMREx53gF3/I+UZXs0+pQT2nkr9gG2iHM2Axtfj0ARGoXQb68Fwb+iEl qrGEX1t91cXAs5PevLbwYvXxrE3fV6k= -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:41 2025 by rpki-client